WMI scanning with Domain Admin Credentials

Started by ad451

ad451

WMI scanning with Domain Admin Credentials 13 August 2016, 07:23

Registered: 1 year ago
Posts: 1

I am scanning my local LAN, trying to do Remote WMI Scanning. I'm not clear how I should be entering my credentials.

My environment is a simple LAN, with a dozen windows 10 computers and a Win2008Server Domain Controller. We have a domain admin account and then regular user accounts.

I have entered the domain admin user in the credentials manager in the following formats (Passwords in password field):
"AdminAccount"
"DomainName\AdminAccount"
"\\DomainName\AdminAccount"

Are any of these correct?

When I try these permutations, running the network scanner as an unprivileged user, I get WMI scan information from the domain controller and the local machine, but "Failed to connect or log in" errors from the regular workstations. My thinking is that the credentials are not working correctly.

To troubleshoot some more, I ran Network Scanner as the domain admin user (via Run as Administrator), and used the "Use Current Account" under Remote WMI scan. When I do this, I get WMI Scan info from the domain controller and local machine, but now the error I get from the workstations is "The RPC Server is unavailable."

I checked that the RPC service is running on all of the machines. I guess this could be some kind of firewall issue on the remote computers, maybe? They are not running anything exotic beyond the built-in Windows10 firewall.

Reply Quote

Andrew

Re: WMI scanning with Domain Admin Credentials 13 August 2016, 11:33

Admin
Registered: 12 years ago
Posts: 5 643

According to Microsoft's documentation the user name can go as username, or username\domain or username@domain.

It's likely to be a firewall issue, which you can test with wbemtest. Please see this article about testing WMI connectivity.

Reply Quote

Newer topic Older topic

Print view of this page

Sometimes you can get the answer faster if you try the forum search and/or have a look at the software user manual to see if your question has already been answered.

Our forum rules are simple:

Be polite.
Do not spam.
If possible, check your spelling and grammar.

Author:

Subject

A brief and informative title for your message, approximately 4–8 words:

Disable BBcode in this message Disable smileys in this message

Help information

Spam prevention: please enter the following code in the input field below.

 **     **  ********    *******   ********   **     ** 
 **     **  **     **  **     **  **     **  **     ** 
 **     **  **     **         **  **     **  **     ** 
 **     **  ********    *******   ********   **     ** 
 **     **  **                **  **     **   **   **  
 **     **  **         **     **  **     **    ** **   
  *******   **          *******   ********      ***

Enter the code:

Message:

[quote=ad451]
I am scanning my local LAN, trying to do Remote WMI Scanning. I'm not clear how I should be entering my credentials.

My environment is a simple LAN, with a dozen windows 10 computers and a Win2008Server Domain Controller. We have a domain admin account and then regular user accounts.

I have entered the domain admin user in the credentials manager in the following formats (Passwords in password field):
"AdminAccount"
"DomainName\AdminAccount"
"\\DomainName\AdminAccount"

Are any of these correct?

When I try these permutations, running the network scanner as an unprivileged user, I get WMI scan information from the domain controller and the local machine, but "Failed to connect or log in" errors from the regular workstations. My thinking is that the credentials are not working correctly.

To troubleshoot some more, I ran Network Scanner as the domain admin user (via Run as Administrator), and used the "Use Current Account" under Remote WMI scan. When I do this, I get WMI Scan info from the domain controller and local machine, but now the error I get from the workstations is "The RPC Server is unavailable."

I checked that the RPC service is running on all of the machines. I guess this could be some kind of firewall issue on the remote computers, maybe? They are not running anything exotic beyond the built-in Windows10 firewall.[/quote]

WMI scanning with Domain Admin Credentials

Software Products

Store & Support

Download

SoftPerfect